Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa
File: 4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa (raw, json)
Hash identifier: Avv1mWPFCgDH8L+bShCZ3laRZSIOjbCtfz5vWH2fX7s=
Subject key identifier: E3:25:70:85:D3:6B:D7:1E:D0:5A:1B:90:66:DE:E3:9D:4D:D6:55:F5
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019420D655E452E729E5A9CB85CDE106E76E
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200403
IP address blocks: 82.114.48.0/24 maxlen: 24
82.114.49.0/24 maxlen: 24
82.114.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:55:e4:52:e7:29:e5:a9:cb:85:cd:e1:06:e7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3257085d36bd71ed05a1b9066dee39d4dd655f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:8d:45:9b:b9:e8:5f:69:c0:b8:17:d7:fc:
67:c6:2f:ab:66:5c:12:df:a9:85:99:b4:6c:ea:13:
2c:94:8f:96:b6:01:a3:5f:c7:f7:f7:0e:9a:c8:48:
1b:5b:18:bc:10:f6:1d:c7:6a:0e:f8:d7:af:e8:68:
d5:03:1e:cb:4d:b1:f9:af:41:d6:92:3c:eb:79:19:
ad:16:1b:f1:92:0b:02:27:cf:08:f6:db:7c:aa:60:
40:02:10:36:df:4c:7b:09:8a:6e:31:ad:bd:fe:ac:
06:ab:da:9f:c3:6b:0e:6a:2b:f1:2c:42:fa:61:e2:
71:3a:ff:e4:76:ca:6a:3a:52:79:ee:8b:7f:d1:4a:
0b:48:3a:72:a1:00:0b:79:06:2e:5b:50:81:45:3b:
7f:cd:21:88:0d:57:52:89:e4:89:2f:ed:50:81:6a:
8f:b0:1c:70:70:15:ea:47:92:ab:33:83:47:9a:d5:
9c:c2:33:54:b4:2d:21:d6:02:28:5f:9d:10:82:00:
34:7f:b8:5f:e0:63:54:1e:dc:fc:fe:05:f6:52:52:
0f:0a:34:25:7a:e0:d2:36:13:9c:5b:7c:21:a7:c3:
aa:48:ad:46:2b:ba:57:ef:e0:5d:11:c2:1c:fc:2d:
6f:4b:d9:72:98:05:6a:14:d9:28:03:16:85:61:30:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:70:85:D3:6B:D7:1E:D0:5A:1B:90:66:DE:E3:9D:4D:D6:55:F5
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.114.48.0-82.114.50.255
Signature Algorithm: sha256WithRSAEncryption
05:1a:ad:ff:55:bc:b0:d3:b2:5a:d4:40:71:5c:a9:ec:b0:ae:
5d:e9:a1:93:3f:26:17:17:40:56:a1:d6:0c:46:45:a3:3f:d9:
89:db:49:95:83:92:d2:d3:2e:e6:85:59:89:6e:81:f5:68:f9:
88:dc:f4:f9:4e:af:69:c3:a5:ca:e2:2b:a0:39:4f:08:31:4a:
58:af:05:eb:c4:98:20:90:7c:fd:95:af:af:0b:13:31:e9:df:
65:10:95:a1:6a:99:8c:86:7e:e4:1b:46:e1:2d:f0:b6:f2:eb:
01:e1:50:33:58:c2:d2:96:09:f7:95:48:33:fa:12:28:da:e0:
c2:04:ec:e1:2e:33:c8:12:b1:9b:6c:24:3b:56:0d:f2:14:46:
6a:aa:b8:72:c3:44:b4:a0:7d:f1:56:46:a7:47:e6:fb:f2:4b:
2f:a3:f8:6e:4c:3a:31:21:20:5d:cd:b0:01:f8:5f:d2:6a:b8:
76:e7:c3:a4:e0:49:5d:82:5f:19:75:7b:a5:1b:d3:13:1d:20:
60:d6:fe:ea:f2:72:84:5b:c8:6d:5e:43:59:9d:13:70:f3:89:
2b:08:7d:27:0a:2d:20:f4:a8:d1:93:c2:19:84:26:95:78:39:
10:8e:80:d1:aa:20:a7:15:eb:a5:76:ae:b9:62:4e:b4:df:b1:
9d:e1:61:56
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQg1lXkUucp5anLhc3hBuduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw
ZGRhOGIwHhcNMjUwMTAxMDc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzI1NzA4NWQzNmJkNzFlZDA1YTFiOTA2NmRlZTM5ZDRkZDY1NWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNqNRZu56F9pwLgX1/xnxi+rZlwS
36mFmbRs6hMslI+WtgGjX8f39w6ayEgbWxi8EPYdx2oO+Nev6GjVAx7LTbH5r0HW
kjzreRmtFhvxkgsCJ88I9tt8qmBAAhA230x7CYpuMa29/qwGq9qfw2sOaivxLEL6
YeJxOv/kdspqOlJ57ot/0UoLSDpyoQALeQYuW1CBRTt/zSGIDVdSieSJL+1QgWqP
sBxwcBXqR5KrM4NHmtWcwjNUtC0h1gIoX50QggA0f7hf4GNUHtz8/gX2UlIPCjQl
euDSNhOcW3whp8OqSK1GK7pX7+BdEcIc/C1vS9lymAVqFNkoAxaFYTBywwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOMlcIXTa9ce0FobkGbe451N1lX1MB8GA1UdIwQY
MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt
YWUwN2YzMmU0MTAyLzEvNHlWd2hkTnIxeDdRV2h1UVp0N2puVTNXVmZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy
LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARScjAD
BABScjIwDQYJKoZIhvcNAQELBQADggEBAAUarf9VvLDTslrUQHFcqeywrl3poZM/
JhcXQFah1gxGRaM/2YnbSZWDktLTLuaFWYlugfVo+Yjc9PlOr2nDpcriK6A5Twgx
SlivBevEmCCQfP2Vr68LEzHp32UQlaFqmYyGfuQbRuEt8Lby6wHhUDNYwtKWCfeV
SDP6Eija4MIE7OEuM8gSsZtsJDtWDfIURmqquHLDRLSgffFWRqdH5vvySy+j+G5M
OjEhIF3NsAH4X9JquHbnw6TgSV2CXxl1e6Ub0xMdIGDW/urycoRbyG1eQ1mdE3Dz
iSsIfScKLSD0qNGTwhmEJpV4ORCOgNGqIKcV66V2rrliTrTfsZ3hYVY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:32 2025 by rpki-client